Illusion Worlds: Deceptive UI Attacks in Social VR
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2025
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866909855136088064 |
|---|---|
| author | Lee, Junhee Heo, Hwanjo Woo, Seungwon Kim, Minseok Kim, Jongseop Kim, Jinwoo |
| author_facet | Lee, Junhee Heo, Hwanjo Woo, Seungwon Kim, Minseok Kim, Jongseop Kim, Jinwoo |
| contents | Social Virtual Reality (VR) platforms have surged in popularity, yet their security risks remain underexplored. This paper presents four novel UI attacks that covertly manipulate users into performing harmful actions through deceptive virtual content. Implemented on VRChat and validated in an IRB-approved study with 30 participants, these attacks demonstrate how deceptive elements can mislead users into malicious actions without their awareness. To address these vulnerabilities, we propose MetaScanner, a proactive countermeasure that rapidly analyzes objects and scripts in virtual worlds, detecting suspicious elements within seconds. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2504_09199 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Illusion Worlds: Deceptive UI Attacks in Social VR Lee, Junhee Heo, Hwanjo Woo, Seungwon Kim, Minseok Kim, Jongseop Kim, Jinwoo Cryptography and Security Social Virtual Reality (VR) platforms have surged in popularity, yet their security risks remain underexplored. This paper presents four novel UI attacks that covertly manipulate users into performing harmful actions through deceptive virtual content. Implemented on VRChat and validated in an IRB-approved study with 30 participants, these attacks demonstrate how deceptive elements can mislead users into malicious actions without their awareness. To address these vulnerabilities, we propose MetaScanner, a proactive countermeasure that rapidly analyzes objects and scripts in virtual worlds, detecting suspicious elements within seconds. |
| title | Illusion Worlds: Deceptive UI Attacks in Social VR |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2504.09199 |